Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

GitHub Is Down

githubstatus.com

Post reply on HN
Print view View original

81–90 of 93 posts

Re: GitHub Is Down

#81

Post by gargarplex »

rad_gruchalski wrote: post #76
gargarplex wrote: post #69

Earlier quoted context omitted.

It does, but it would've mirrored your latest commit before it went down. Anyway, here's how you connect Keybase to GitHub: https://blog.codefor.cash/2019/08/30/free-automatic-github-b... https://github.com/codeforcash/github-to-keybase-mirror Note: this was a v1, and I'm sure there are more resilient ways to do this. Critical feedback strongly encouraged (ideally along with suggestions).

Hooks ( https://git-scm.com/docs/githooks ) together with templates ( https://coderwall.com/p/jp7d5q/create-a-global-git-commit-ho... ) sound like a good alternative. Edit: I can see where your solution has an advantage. When one accepts contributions, all of that can be automated with web hooks via github. Still, having to run lambda/similar for this is a bit heavy weight. Edit 2: Considering that for a release, I w…

Wouldn't replacing the github hook with a git-hooks script incrementally improve the solution as it currently exists?

Then, combine that with a git-hook script that designate all non-release branches push to team's Keybase repo as well? Maybe including a custom prefix in the branch name to avoid need for conflict resolution?

Re: GitHub Is Down

#82

Post by jfkebwjsbx »

corndoge wrote: post #56
thanksforfish wrote: post #42

Earlier quoted context omitted.

This is a good point, but it could be worded better. One of the things a site reliability engineer should think about is how well the site can be operated when dependencies have issue. After an incident like this, even if you were able to recover, it's worth thinking about how things could have gone better. In the past I had a painful experience with one application I was supporting that needed to install NPM package…

To your point on NPM dependencies, CDNs for JS libraries is another thing that I recently learned is common practice, which I don't fully understand. It seems like if the CDN goes down then your application stops working, but I am convinced I'm missing something here because it seems like such poor engineering judgement. This seems to be really common in SPAs, which is precisely where (it seems to me) you shouldn't b…

People do it because it is faster (limit of requests per domain) and cheaper.

Re: GitHub Is Down

#83

Post by mr_toad »

gumby wrote: post #77
thanksforfish wrote: post #58

Earlier quoted context omitted.

Of course, there is. You just need to host it. Self-hosted GitLab mirrors work great when GitHub is down. https://docs.gitlab.com/ee/user/project/repository/repositor...

You can just sync with someone else’s repo by specifying it on the command line. Nothing to install, no script, nothing. It’s built into git and is right there in the single line summary of the man pages for git-fetch, git-pull etc: they all take a repository argument.

Managing keys for all the contributors quickly gets to be a chore.

Identity management is what Github really is all about.

Re: GitHub Is Down

#84

Post by jfkebwjsbx »

rvz wrote: post #72
notacoward wrote: post #35

Earlier quoted context omitted.

GitHub addiction is not just about git itself. It's about the entire ecosystem of pull requests, issues, forking, linking to related projects, CI integrations, hosting for docs, and so on, all integrated under one sign-on umbrella. It is awfully convenient. Yes, for sure you can self-host one of the alternatives like GitLab, or assemble an equivalent set of services from smaller parts. It is absolutely reasonable to…

It is indeed convenient but the whole ecosystem now runs the risk of being a single source of failure if even one part of the service goes down and it is out of your control to do anything about it and also defeats the purpose of decentralisation of using git. It may not matter for personal or toy projects, but for company or serious ones, it does. In the case of other risks of only using GH to host your project, Its…

Having GitHub as the primary repository is OK as long as you do not depend on it for working, testing and deploying.

The issue is that people start using the CI/CD, the PRs, the issues and... yeah.

Re: GitHub Is Down

#85

Post by grumpy8 »

pengaru wrote: post #75
senko wrote: post #40

Earlier quoted context omitted.

Unless you have the (ops) capacity to host it yourself reliably, chances are GitHub will be up more than your self-hosted solution. As I'm typing this, I'm waiting for GitHub to recover so I can deploy an update to a rather important project for a big client. However, I'm happy it's their engineers to be scrambling to fix their git hosting, instead of me context switching from my work and rushing to duct-tape piece o…

> Unless you have the (ops) capacity to host it yourself reliably, chances are GitHub will be up more than your self-hosted solution. For an individual it's absolutely trivial to self-host git over ssh more reliably than github. It just costs a bit of money.

> self-host git over ssh more reliably than github.

Host where? That host may be down. If it's local, then you run into other problems trying to access it remotely.

Still, I find github to be down quite a lot lately which is concerning. It doesn't stop me from working, I just can't review PRs and get changes.. but I would be more worried if I were using github actions stopping me from releasing a hotfix.

Re: GitHub Is Down

#86

Post by johnghanks »

meowface wrote: post #73
spir wrote: post #46

PSA: I just received a github phishing request that was not detected by Gmail. I almost fell for it. Phishing email looks like a "review your suspicious activity" alert, but the alert is the suspicious activity. https://imgur.com/a/zdtWmuN

Did the odd capitalization, "April 01th", and unrelated sending address not tip you off?

Yeah I gotta agree with you. How is this any different from the other 10s of thousands of variations of phishing attempts?

If it's not signed and it's not from github.com or a registered subdomain, or if the URL of the action isn't _explicitly_ github.com... it's not legit. It doesn't matter if it slipped through GMail's filter or not...

Re: GitHub Is Down

#87

Post by thanksforfish »

jfkebwjsbx wrote: post #82
corndoge wrote: post #56

Earlier quoted context omitted.

To your point on NPM dependencies, CDNs for JS libraries is another thing that I recently learned is common practice, which I don't fully understand. It seems like if the CDN goes down then your application stops working, but I am convinced I'm missing something here because it seems like such poor engineering judgement. This seems to be really common in SPAs, which is precisely where (it seems to me) you shouldn't b…

People do it because it is faster (limit of requests per domain) and cheaper.

Specifically for the javascript frameworks, the use of a popular CDN increases the chance that the browser will have the asset in the cache already. Browser cache is a huge win for load times.

Static file hosting via a managed CDN is a fairly reliable option, better than many companies can build on their own.

Re: GitHub Is Down

#88

Post by ngokevin »

enraged_camel wrote: post #49
jakejarvis wrote: post #28

Even our static assets from raw.githubusercontent.com are throwing 500s. Whatever it is, it sounds like a pretty widespread failure...

Yeah, can confirm. I'm working on some visualizations for covid-19 where I pull data from raw.githubusercontent.com and I'm getting 500s.

There are some CDNs in front of rawgit like jsDelivr that may work.

Re: GitHub Is Down

#89

Post by meowface »

johnghanks wrote: post #86
meowface wrote: post #73

Earlier quoted context omitted.

Did the odd capitalization, "April 01th", and unrelated sending address not tip you off?

Yeah I gotta agree with you. How is this any different from the other 10s of thousands of variations of phishing attempts? If it's not signed and it's not from github.com or a registered subdomain, or if the URL of the action isn't _explicitly_ github.com... it's not legit. It doesn't matter if it slipped through GMail's filter or not...

I don't mean to shame people for falling for phishing. I fell for a convincing Steam phish once when I was a young teenager after a friend's account was compromised and messaged me with a link to a perfect clone of the login page and a similar domain.

But as far as phishes go, this one just seems not too convincing.

Re: GitHub Is Down

#90

Post by ksec »

spir wrote: post #46

PSA: I just received a github phishing request that was not detected by Gmail. I almost fell for it. Phishing email looks like a "review your suspicious activity" alert, but the alert is the suspicious activity. https://imgur.com/a/zdtWmuN

Saw many similar request on twitter as well. Hopefully the two things ( Being Down and Phishing ) are coincidence.
Post reply on HN